PhreeBooks ERP Remote Code Execution Vulnerability in Image Manager

A remote code execution vulnerability has been identified in PhreeBooks ERP version 5.2.3. This vulnerability resides in the image manager, where authenticated attackers can upload and execute arbitrary PHP files by circumventing file extension restrictions. Exploitation of this vulnerability allows attackers to establish reverse shell connections and execute system commands.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where PhreeBooks ERP is hosted.

Reproduction

To reproduce this vulnerability, an authenticated user must upload a malicious PHP file through the image manager's upload feature. The uploaded file can then be executed to run arbitrary commands on the server. This can be automated with a Python script that handles the authentication and file upload process.